adds sentry to backpack-api and app-mobile

[peterpme]

adds sentry perf / error monitoring

i need help with:

• adding environment variables (SENTRY_DSN)
• knowing which fields to filter out
• knowing which services to add as projects

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated
backpack	✅ Ready (Inspect)	Visit Preview	💬 Add your feedback	Mar 12, 2023 at 10:25PM (UTC)

[github-actions]

yarn.lock changes

Summary

Status	Count
	59
	1
	2
	2

Click to toggle table visibility

Name	Status	Previous	Current
@colors/colors		-	1.5.0
@contrast/fn-inspect		-	3.3.0
@grpc/grpc-js		-	1.8.12
@grpc/proto-loader		-	0.7.5
@newrelic/aws-sdk		-	5.0.2
@newrelic/koa		-	7.1.1
@newrelic/native-metrics		-	9.0.0
@newrelic/superagent		-	6.0.0
@protobufjs/aspromise		-	1.1.2
@protobufjs/base64		-	1.1.2
@protobufjs/codegen		-	2.0.4
@protobufjs/eventemitter		-	1.1.0
@protobufjs/fetch		-	1.1.0
@protobufjs/float		-	1.0.2
@protobufjs/inquire		-	1.1.0
@protobufjs/path		-	1.1.2
@protobufjs/pool		-	1.1.0
@protobufjs/utf8		-	1.1.0
@sentry/browser		-	7.29.0
@sentry/cli		-	1.74.4
@sentry/core		-	7.42.0
@sentry/hub		-	7.29.0
@sentry/integrations		-	7.29.0
@sentry/node		-	7.42.0
@sentry/react-native		-	4.13.0
@sentry/react		-	7.29.0
@sentry/replay		-	7.29.0
@sentry/tracing		-	7.42.0
@sentry/types		-	7.42.0
@sentry/utils		-	7.42.0
@sentry/wizard		-	1.4.0
@solana/web3.js		1.73.3	1.63.1
@types/long		-	4.0.2
@types/node		18.14.1	18.15.0
@types/triple-beam		-	1.3.2
@tyriar/fibonacci-heap		-	2.0.9
agentkeepalive		4.3.0	-
aproba		-	1.2.0
are-we-there-yet		-	1.1.7
code-point-at		-	1.1.0
concat-stream		-	2.0.0
console-control-strings		-	1.1.0
fecha		-	4.2.3
gauge		-	2.7.4
has-unicode		-	2.0.1
humanize-ms		1.2.1	-
localforage		-	1.10.0
logform		-	2.5.1
long		-	5.2.1
lru_map		-	0.3.3
newrelic		-	9.11.0
npmlog		-	4.1.2
number-is-nan		-	1.0.1
opn		-	5.5.0
protobufjs		-	7.2.2
r2		-	2.0.1
react-refresh		0.14.0	0.11.0
read-env		-	1.3.0
safe-stable-stringify		-	2.4.2
sentry-expo		-	6.1.0
triple-beam		-	1.3.0
typedarray		-	0.0.6
wide-align		-	1.1.5
winston-transport		-	4.5.0

[socket-security]

Socket Security Pull Request Report

Dependency issues detected: If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
@sentry/cli@1.74.4 (added)	install	package.json via @sentry/react-native@4.13.0, sentry-expo@6.1.0, packages/app-mobile/package.json via @sentry/react-native@4.13.0, sentry-expo@6.1.0

Pull request report summary

Issue	Status
Install scripts	⚠️ 1 issue
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore @sentry/cli@1.74.4

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Powered by socket.dev

[hkirat]

Should we avoid this until we audit sentry-expo? Like adding it to the app-extension/app-mobile?

[peterpme]

sentry is already hooked up!